DSA-2021-080: Dell PowerEdge VRTX Security Update for a Weak Password Encryption Vulnerability
Résumé: Dell PowerEdge VRTX remediation is available for a weak password encryption vulnerability that may be exploited by malicious users to compromise the affected system.
Cet article concerne
Cet article ne concerne pas
Cet article n’est associé à aucun produit spécifique.
Toutes les versions du produit ne sont pas identifiées dans cet article.
Impact
High
Détails
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2021-21507 | Dell Networking X-Series firmware versions prior to 3.0.1.8 and Dell PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable system with privileges of the compromised account. | 8.8 | CVSS:3.1(AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) |
For information regarding the X-Series remediation, see KB article 185250: DSA-2021-017: Dell Networking Security Update for a Weak Password Encryption Vulnerability
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2021-21507 | Dell Networking X-Series firmware versions prior to 3.0.1.8 and Dell PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable system with privileges of the compromised account. | 8.8 | CVSS:3.1(AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) |
For information regarding the X-Series remediation, see KB article 185250: DSA-2021-017: Dell Networking Security Update for a Weak Password Encryption Vulnerability
Produits concernés et mesure corrective
| Product | Affected Versions | Updated Versions | Link to Update |
| Dell PowerEdge VRTX | VRTX 1GbE Switch Module (R1-2401) firmware versions prior to 2.0.0.82 | 2.0.0.82 | https://www.dell.com/support/home/en-us/drivers/DriversDetails?driverId=4H24H |
| Dell PowerEdge VRTX | VRTX Switch (R1-2210) firmware versions prior to 2.0.0.82 |
2.0.0.82 | https://www.dell.com/support/home/en-us/drivers/DriversDetails?driverId=94P89 |
| Product | Affected Versions | Updated Versions | Link to Update |
| Dell PowerEdge VRTX | VRTX 1GbE Switch Module (R1-2401) firmware versions prior to 2.0.0.82 | 2.0.0.82 | https://www.dell.com/support/home/en-us/drivers/DriversDetails?driverId=4H24H |
| Dell PowerEdge VRTX | VRTX Switch (R1-2210) firmware versions prior to 2.0.0.82 |
2.0.0.82 | https://www.dell.com/support/home/en-us/drivers/DriversDetails?driverId=94P89 |
Historique des révisions
| Revision | Date | Description |
| 1.0 | 2021-04-14 | Initial Release |
| 1.1 | 2021-06-10 | Acknowledgments Updated |
Remerciements
Dell Technologies would like to thank Ken Pyle for his contributions.
Informations connexes
Mention légale
Produits concernés
POWEREDGE VRTX, Product Security InformationPropriétés de l’article
Numéro d’article: 000185252
Type d’article: Dell Security Advisory
Dernière modification: 22 Nov 2021
Trouvez des réponses à vos questions auprès d’autres utilisateurs Dell
Services de support
Vérifiez si votre appareil est couvert par les services de support.